Cyber Security Consulting from Zug · since 2020

We make Swiss companies cyber-resilient.

Cyberopex advises, implements and operates: from NIS2 and ISO 27001 to AI governance and AI security under ISO 42001 and ISO/IEC 27090. With experienced consultants, our own GRC platform and AI agents. Hosted in Switzerland.

2020founded in Baar
30+clients & partners
100 %Swiss hosted
360°from advice to operations

Companies and organisations that trust Cyberopex

PlantedVisanaV-ZUGZLIHaag-StreitAsperiqsmarttSmartConBelimedHayesAEB SicherheitsdienstEraneosHortimaH-CryptoSoftwareOneKidstonarxysGHRVBSLI-GeniusPrebeckCampana & SchottontinueonikoWISSprocessmindKanadeviaBaumannBitcoin SuisseCanton of GlarusNext Connection PartnersNext Level ImmobilienLevex AG Management
Services

One partner for strategy, technology and operations.

We analyse your security posture and develop concepts and measures that fit your systems. We then implement them or run them for you, aligned with legal and technical standards.

Swiss GRC Hosting

Your GRC platform. Hosted in Switzerland.

Run it yourself or have it run for you: you get your own Eramba instance in an ISO 27001-certified data centre in Switzerland. On request, we also run your ISMS.

isms.your-company.chSwiss hosted
92%ISO 27001controls effective
84%NIS2requirements met
78%revFADPmeasures implemented
Top risks
Ransomware on file server
Critical supplier outage
Missing MFA for admins
Phishing click rate
Upcoming reviews
Access policyin 5 days
BCM testin 12 days
Supplier auditin 21 days
Management reviewin 34 days

Sample view with demo data

New

Swiss GRC Hosting

CHF 5'990.–per year, excl. VAT
  • Your own Eramba instance for your ISMS
  • Hosting in Switzerland, ISO 27001-certified data centre
  • Updates, backups and monitoring included
  • Single sign-on via SAML
  • AI agents as an add-on for CHF 590.– / month
Book now
Upgrade

Prefer to have it run for you? GRC as a Service

Everything in Swiss GRC Hosting, plus setup and support by our consultants. Want us to run the whole ISMS? That is Managed ISMS.

  • Setup & data migration
  • Support by GRC consultants
  • AI agents for routine work
  • Audit preparation & reporting
Request a quote
AI Agent Store

Six AI agents for your ISMS

Evidence review, control review, risk analysis, policy review, vendor risk and audit readiness. Pentest governance follows in January 2027. CHF 590.– per agent per month, 50 agent runs per month included, then CHF 0.70 per run, excl. VAT.

  • Human in the Loop
  • Data stays in Switzerland
  • Savings calculator
View agents
Training

Security starts with people.

Would you like training for your team? We can help in these areas:

Security awareness & phishingNIS2 & ISA for managementISO 27001 & ISMS rolesData protection (revFADP)Using AI securelyCrisis exercises
Request training
Technology partners
  • erambaGRC platform
  • MicrosoftCopilot, Agent 365, Purview
  • FortIT fortControlSecurity Monitoring
  • CISO AssistantOpen-source GRC
Compliance check

Which rules apply to your company?

Four questions, a first assessment: NIS2, revFADP and GDPR, ISA reporting obligation, ISO 27001 or AI regulation. In 30 seconds.

Industry
Employees
Active in the EU (clients, branch or services)?
Do you use or develop AI?
Free: Quick Cyber Security Evaluation15 questions based on the ICT minimum standard, maturity level as a PDF report.
Start now →

Your assessment

Based on your answers, these topics are relevant:

    Recommendation: NIS2 gap analysis with an ISO 27001 roadmap.

    Book a call

    Applies: mandatoryCheck: depends on your activitiesRecommended: voluntary standard

    Initial guidance only. It does not replace a legal review of your specific case.

    Case studies

    What we have achieved for our clients.

    Hands-on projects from medtech, industry, security and food tech. Read how we approached them and what they delivered.

    Governance

    ISMS & GRC with the canton of Glarus

    ISMS under ISO/IEC 27001:2022 and a GRC tool for the administration, municipalities, courts, police and schools.

    Read case study
    Governance

    Security governance with Haag-Streit

    A security governance framework based on NIST for the strict requirements of medtech.

    Read case study
    Integration

    SOC support with Haag-Streit

    Faster incident handling and proactive threat hunting with Microsoft Defender and Sentinel.

    Read case study
    Consulting

    Cyber Security Officer service with V-ZUG

    An external Cyber Security Officer for a leading Swiss manufacturer of household appliances.

    Read case study
    Integration

    Information security and ICT with AEB

    Security as a whole: concepts, systems engineering and new technologies, on-prem and in the cloud.

    Read case study
    Assessment

    NIST security assessment with Planted

    A fast status assessment based on NIST, with first improvements during the audit itself.

    Read case study
    Awareness

    Phishing campaign with Hortima

    Simulated phishing attacks so that staff reliably recognise fraudulent emails.

    Read case study
    Training

    Security awareness with Hortima

    Training that builds a strong security culture across the whole company.

    Read case study
    Consulting

    Test management assessment with Kanadevia Inova

    Test processes assessed and benchmarked against ISO/IEC/IEEE 29119, ISTQB and TMMi: clear measures for quality and efficiency.

    Read case study
    Integration

    Secure Your Modern Workplace with smart.t

    Security assessment of Microsoft 365, Entra ID and endpoints, followed by hardening with Defender, Conditional Access and Intune.

    Read case study
    Your project

    Become our next case study.

    Tell us where you stand. We will show you how we would approach it.

    Arrange a call
    Testimonials

    Over 30 companies trust Cyberopex.

    From medtech and industry to the public sector: this is what our clients say about working with us.

    All case studies
    10Case studies
    30+Clients & partners
    Testimonials

    As a small canton, we found in Cyberopex a pragmatic partner that knew how to build an excellent and highly professional ISMS. We are convinced that this has made a significant contribution to strengthening our information security and that we will benefit from it in the years to come.

    GLHead of IT DepartmentKanton Glarus – Informatik

    Working with Cyberopex was straightforward and highly efficient, which was extremely important to us. Through interviews with the right stakeholders and a review of the existing documents, Cyberopex was able to deliver a comprehensive and insightful report including recommendations for improvement in a very short time.

    KIGroup Director Information TechnologyKanadevia Inova AG

    Thanks to their expertise, we were able to implement a comprehensive security governance framework based on the NIST standard that meets the strict requirements of the medtech industry.

    HSChief Information OfficerHaag-Streit Gruppe

    Cyberopex always acted quickly, courteously and professionally. Their pragmatic approach helped us meet our security requirements efficiently and effectively.

    VZHead of ICT Projects & Business ServicesV-ZUG AG

    Thanks to the professional support from Cyberopex, we not only gained a clear picture of our current security posture but were also able to implement concrete, effective measures successfully.

    STChief Information Officersmart.t AG

    The proactive threat hunting was particularly valuable, as it allowed us to detect potential threats early.

    HSHead of InfrastructureHaag-Streit Gruppe

    With Cyberopex, we have a partner that knows security in the cloud and on-prem inside out and can also implement it.

    AEBManagementAEB Sicherheitsdienst

    Cyberopex GmbH has proven that it has comprehensive know-how in information security and is an outstanding partner for start-ups and scale-ups.

    PLChief Information Technology OfficerPlanted

    With its expertise and tailored solutions, Cyberopex has ensured that our employees are not only protected but also actively contribute to the security of our IT infrastructure.

    HOHead of HR and ITHortima
    Christian Serra, Founder of Cyberopex, in the office in Baar
    Christian SerraFounder · Cyber Security, Governance & AI
    About us

    Pioneers in cyber security, governance and AI.

    Since 2020 we have combined consulting, our own GRC platform and AI agents from a single source for Swiss companies of every size.

    Our vision: every Swiss company can use AI and digitalisation securely, with an ISMS that runs day to day, even without its own ISMS team.

    PragmaticData in SwitzerlandHuman in the loopTurning risks into opportunities
    Christian Serra

    Founder and expert in cyber security, governance and AI, with 20 years of experience in IT. Christian Serra combines strategy and technology: he builds ISMS and governance programmes based on ISO 27001, ISO 42001, ISO/IEC 27090, NIS2, NIST CSF and revFADP, advises executive boards on the secure use of AI and, with his team, builds AI infrastructure and AI agents for companies.

    FAQ

    Frequently asked questions

    Is your question not listed? We usually reply on the same working day.

    Does NIS2 also apply to Swiss companies?

    NIS2 applies directly only in the EU. However, Swiss companies are affected if they have branches or services in the EU or supply critical EU customers. We clarify your scope in a short analysis.

    What does an ISO 27001 implementation cost?

    That depends on size, scope and maturity. In a short initial consultation, we estimate effort and budget. For ongoing operation, Swiss GRC Hosting is available from CHF 5'990.– / year.

    What is GRC as a Service?

    We set up your own GRC platform in Switzerland, migrate data and controls and run the platform, with AI agents if you wish. Your team does the ISMS work. If you want us to take that on too, there is Managed ISMS.

    Does Cyberopex also build AI solutions for us?

    Yes. With AI Engineering we build your own AI infrastructure in Switzerland and develop AI agents for marketing, sales, customer service and administration, secured under ISO/IEC 27090.

    Where is our data stored?

    Exclusively in Switzerland. Cyberopex operates the platform and the AI agents in an ISO 27001-certified data centre in Switzerland.

    Do you also work with smaller companies?

    Yes. Our services are also tailored specifically to SMEs, because every company should be able to afford strong cyber security.

    Contact

    How can we help?

    Tell us briefly what it is about. We will get back to you with a proposed date for a no-obligation initial consultation.

    Cyberopex GmbH · Baar, Switzerland
    What is it about? You can select more than one.
    We usually reply within 1 working day.

    Order

    Your selection

      Consulting needs (optional)

      Your order goes to [email protected]. You will receive an order confirmation by email. We send a separate quote for consulting requests.

      Customer portal

      Projects, documents, GRC platform, AI agents, invoices and support in one place.

      Coming soon The customer portal is not online yet. We will launch it at a later date and send you your access by email. Until then, reach us at [email protected]. Below is a preview.

      or
      Multi-factor protection is mandatory

      Sign-in runs through our identity service in Switzerland: passkey, your company Microsoft account or an authenticator app.